TMA-SHAREPOINT-1.1

Ensure access to SharePointEmailws.asmx is limited to only the server farm account

보통레벨 1수동 검토sharepoint

설명

Restrict access to the Microsoft SharePoint Directory Management Service by securing the file associated with this service, which is SharePointEmailws.asmx. Only the SharePoint server farm account requires access. Manual review.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Open %CommonProgramFiles%\Microsoft Shared\Web Server Extensions\16\ISAPI\SharePointEmailws.asmx > Properties > Security (or run Get-Acl on it). Verify only WSS_RESTRICTED_WPG (the farm account) has Modify/Write access to the file.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Edit the file ACL so only WSS_RESTRICTED_WPG has modify access to SharePointEmailws.asmx; remove write/modify for other principals.

속성

운영 체제: 모두
태그: sharepointpermissions
참고 자료: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 1.1 Ensure access to SharePointEmailws.asmx is limited to only the server farm account